[ 
https://issues.apache.org/jira/browse/GEODE-8496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17259163#comment-17259163
 ] 

ASF GitHub Bot commented on GEODE-8496:
---------------------------------------

jinmeiliao commented on pull request #5873:
URL: https://github.com/apache/geode/pull/5873#issuecomment-754852702


   You can leave spring-test to 5.3.1 and only upgrade the rest because of this 
bug in sprinng-test module: 
https://github.com/spring-projects/spring-framework/issues/26324, it’s fixed in 
5.3.3
   
   you can just apply this change to your PR: 
https://github.com/jinmeiliao/geode/commit/dd87648be0bdb60c6d1809dbf244aff6011bad25


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> bump dependencies for 1.14
> --------------------------
>
>                 Key: GEODE-8496
>                 URL: https://issues.apache.org/jira/browse/GEODE-8496
>             Project: Geode
>          Issue Type: Improvement
>          Components: build
>            Reporter: Owen Nichols
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 1.14.0
>
>
> now is a good time in the lull between 1.13 and 1.14 to roll 3rd party 
> libraries to latest versions wherever possible.  Doing this proactively helps 
> us stay ahead of CVEs and keep up with bugfixes.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to